General

  • Target

    2024-03-18_1efdf016ef12c0e4bc4bae2172d7407d_cryptolocker

  • Size

    102KB

  • MD5

    1efdf016ef12c0e4bc4bae2172d7407d

  • SHA1

    52177f9d6dd839001e1839a6a294b397962e851c

  • SHA256

    92ec9d42c0a56ca3da861763be68da75cdc9de4e1c975e04df5bf60bfabb7a27

  • SHA512

    9db2cca7b54c2aa64e9f52d68afd30264320d4196d1ff867f630dcea4aff38be44e136338c223d8dea2f62eda839dbcf59deeb6662a6c4e6d086d1c097328db8

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2mw81s:xj+VGMOtEvwDpjubwQEIiVmkxv/+s

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-18_1efdf016ef12c0e4bc4bae2172d7407d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections